bug - TrackMe Flip events - For consistency purposes, TrackMe should also include the anomaly_reason field in the event generation

trackme-limited / trackme-report-issues

The purpose of this repository is to allow Splunk community to report issues and enhancements requests

2 stars 0 forks source link

Closed guilhemmarchand closed 1 month ago

guilhemmarchand commented 1 month ago

bug - TrackMe Flip events - For consistency purposes, TrackMe should also include the anomaly_reason field in the event generation

When TrackMe entities experience a status change, a corresponding flipping event is generated with the sourcetype trackme:flip
The field anomaly_reason is a key field in TrackMe's convention, it is part of the flipping message but should also be included on its own for consistency purposes with other TrackMe concepts.